Shibboleth SP on Apache HTTP behind SSL load balancer?

[James W. Anderson]

I'm trying to configure the Shibboleth service provider to run behind a load balancer that uses SSL on the frontend, but passes unencrypted HTTP to the web server, like this:

[Browser] -https:443 --> [LB] -http:80--> [SP | Apache]

If I set the attribute handlerSSL="true" on the <Sessions> item (in shibboleth2.xml), Shibboleth expects the incoming request to Apache to use SSL over port 443; if I set handlerSSL="false" Shibboleth seems to generate the wrong URLs to refer back to the site-it prefixes them with http: instead of https:

What am I missing here?

Thanks,

James Anderson
The Coca-Cola Company
Atlanta, Georgia USA


________________________________

CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.

________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151006/7d74334e/attachment.html>